🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-17324 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access sensitive configuration data and perform unauthorized actions due to... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17323 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to XML external entity (XXE) injection. | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17322 HIGH IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive credentials and compromise a... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17321 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to delete or overwrite arbitrary control-plane assets due to an ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17320 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to an insecure direct object... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17319 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify tool configuration and cause a denial of service due t... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17318 HIGH IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information d... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17317 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal resources and cause a denial of service due t... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17316 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform server-side request forgery due to improper validation of user-supp... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17315 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to improper validation of user-supplied UR... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17314 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forge... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17313 CRITICAL IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and take control of gateway configuration due ... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17312 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to force a user to authenticate into an attacker-controlled account due to cro... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17311 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify application API subscriptions due to broken object-lev... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17310 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to the use of a hard-coded cryptographic k... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17309 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and tamper with configuration due to improper ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17308 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive credentials and manipulate tool responses due to improper ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17307 MEDIUM IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information d... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17306 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information from internal network resources due to server-... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-17305 MEDIUM IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information d... | MEDIUM | ????? | ????? | NVD | 6 days ago |